CloudWatch to SNS: how to set message attributes for SNS subscription filtering?

I have CloudWatch event rules targeting SNS. I want SNS subscriptions to use attributes filter policies, but can't figure out how to have CloudWatch set attributes. I'd like to avoid the overhead of Lambda setting attributes based on message body.